Github GitHub - Yang0615777/PocList: Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_...

3 years ago

source link: https://github.com/Yang0615777/PocList
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.

雁不过衡阳的PocList

关于POC

这里会把作者在各种环境中遇到的繁琐漏洞简化为POC工具,以便在后续中轻松发现与利用

1.将收集到的地址放入txt文件,每行一个.

2.java -jar xx.jar

3.输入存放url的绝对路径

4.所有的POC都如此做即可

此处提供的所有工具仅供授权状态下使用,如发生刑事案件,非授权攻击行为于本人无关.望大家熟知《网络安全法》.

感谢

最后别忘了给一些小星星,你的星星是我前进的动力.

编写的POC

Alibaba-Nacos-Unauthorized

ApacheDruid-RCE_CVE-2021-25646

MS-Exchange-SSRF-CVE-2021-26885

Oracle-WebLogic-CVE-2021-2109_RCE

RG-CNVD-2021-14536

RJ-SSL-VPN-UltraVires

Redis-Unauthorized-RCE

TDOA-V11.7-GetOnlineCookie

VMware-vCenter-GetAnyFile

yongyou-GRP-U8-XXE

Oracle-WebLogic-CVE-2020-14883

Oracle-WebLogic-CVE-2020-14882

Apache-Solr-GetAnyFile

F5-BIG-IP-CVE-2021-22986

Sonicwall-SSL-VPN-RCE

GitLab-Graphql-CNVD-2021-14193

D-Link-DCS-CVE-2020-25078

WLAN-AP-WEA453e-RCE

360TianQing-Unauthorized

360TianQing-SQLinjection

FanWeiOA-V8-SQLinjection

QiZhiBaoLeiJi-AnyUserLogin

Recommend